Switch it on. Open Settings → Modules, find OTP Verification and enable it. Click Configure, then Open Settings (or go straight to the OTP Verification settings page).
Choose the flows under Verification flows. Each has an Enabled switch and Allowed channels:
Passwordless login — customers can sign in with a code;
Checkout / generic verification — the code used at checkout and registration;
Signup phone verification — codes for verifying a phone at registration.
Leave Allowed channels unticked to allow any channel that is ready.
Decide what to require under Signup & change verification:
Verify at signup — None, Email, Phone or Email + Phone;
Verify on change — Off, Email, Phone or Email + Phone.
Gating — tick Require verification before checkout if shoppers must confirm their email or phone before placing an order.
For SMS codes: set up an SMS provider first (Settings → Messaging, SMS channel), with a DLT-approved one-time-code template. Then check the Mobile code delivery card shows the route as Ready.
Click Save.
Test in a private window: log in with a code, register a test account, and place a test order.
